graduates.aviva.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:60:f0:3e:6c:84:ec:92:a9:af:9b:be:13:0c:9c:48:bf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=graduates.aviva.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:60:f0:3e:6c:84:ec:92:a9:af:9b:be:13:0c:9c:48:bf
Serial Number (int): 289028582820825330761164276016858533742783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:a4:91:1f:6b:40:fc:51:51:1c:4a:b9:ec:1c:c6:3a:30:ce:2d:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:2b:82:24:12:cb:51:0a:35:19:1a:3a:65:a5:e7:54:a6:1c:97:d9
Fingerprint (sha256): 08:3c:a2:5e:23:db:68:71:aa:ee:ef:0e:56:37:73:da:50:62:e5:04:11:ac:bb:a1:fb:a3:b2:58:21:5f:a3:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate graduates.aviva.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for graduates.aviva.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

graduates.aviva.co.uk
www.graduates.aviva.co.uk

Other certificates including the domain name aviva.co.uk

(limited to 100 certificates)
www.healthpoint.qs.aviva.co.uk
www.aviva-platform.aviva.co.uk
avivaprivacy.uk
www.eserve.avivaservices.co.uk
cert02.uk.aviva.com
www.nationwide.qs.aviva.co.uk
xmlnj.qs.aviva.co.uk
barclayssaml.qs.aviva.co.uk
aviva.co.uk
www.xmlquote.qs.aviva.co.uk
footyfinance.aviva.co.uk
cert03.uk.aviva.com
cert06.uk.aviva.com
avivaprivacy.uk
identitysecure.hsbc.aviva.co.uk
jira-pp.aviva.co.uk
np-cert02.uk.aviva.com
www.insurance.qs.aviva.co.uk
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
www.direct.aviva.co.uk
www.avivahealth.qs.aviva.co.uk
footyfinance.football
rmdapi1.aviva.co.uk
poet.qs.aviva.co.uk
rmdapi4.aviva.co.uk
cert08.uk.aviva.com
cert01.uk.aviva.com
www.avivahealth.qs.aviva.co.uk
aviva.co.uk
aviva.co.uk
www.selfservice.qs.aviva.co.uk
secure.qs.aviva.co.uk
cert06.uk.aviva.com
aviva.co.uk
www.apb.qs.aviva.co.uk
www.certlogin.aviva.co.uk
www2.wsg.qs.aviva.co.uk
avivaprivacy.uk
aviva.co.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
rmdapi1.aviva.co.uk
jira.aviva.co.uk
cert10.uk.aviva.com
cert01.tmp.aviva.com
www.ukdi.qs.aviva.co.uk
cert08.uk.aviva.com
cert01.uk.aviva.com
incapsula.com
np-cert02.uk.aviva.com
cert10.uk.aviva.com
www.realitycheckaccount.aviva.co.uk
www.isup.preview.qs.aviva.co.uk
www.apb.qs.aviva.co.uk
intquote.aviva.co.uk
www.insuranceportal-tsbhome-branch.qs.aviva.co.uk
incapsula.com
cert01.uk.aviva.com
avivaprivacy.uk
graduates.aviva.co.uk
incapsula.com
aviva.co.uk
careers.aviva.co.uk
aviva.co.uk
avivaprivacy.uk
referral.aviva.co.uk
cert01.uk.aviva.com
www.wsg.qs.aviva.co.uk
rmdapi2.data.aviva.co.uk
cert08.uk.aviva.com
footyfinance.aviva.co.uk
t.notifications.aviva.co.uk
services.aviva.co.uk
www.quotehc.qs.aviva.co.uk
www.creditor.qs.aviva.co.uk
www.aviva.co.uk
www.hre.qs.aviva.co.uk
www.hsol.qs.aviva.co.uk
uat.aviva.co.uk
aviva.co.uk
www.avivatransfer.co.uk
aviva.co.uk
rmdapi3.aviva.co.uk
hawkeye.qs.aviva.co.uk
incapsula.com
www.mas.qs.aviva.co.uk
www.dsfhe.qs.aviva.co.uk
incapsula.com
mail.aviva.com
cert03.uk.aviva.com
incapsula.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert01.tmp.aviva.com
mybusiness.aviva.co.uk
cert05.uk.aviva.com

Certificate

The complete raw certificate details for graduates.aviva.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISA1Fg8D5shOySqa+bvhMMnEi/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjUwODA0NDNaFw0y
MDAxMjMwODA0NDNaMCAxHjAcBgNVBAMTFWdyYWR1YXRlcy5hdml2YS5jby51azCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPCoLnJ4ygrlIy0pxQKL0NR8
T3HqmPFKVTqc5bna4VMA0kyDjtgF02jgAg6hH6q/kHB9KbEpm/Kjq3w9GkBJ0pv1
0GQkyFHehx/UVzLp9OdwtDEsFNTgnnMPg47WC+aJCA5H/5zQ9m3/XJ151zkFKK0l
iP7N28x2DTHCYQ1HNBXk/rdIykZI2/X8NjRr/lleAdD3R+EPXYDxRTEWMMJiB9/N
walD2mz9KrFsgz2CpZhiNYaT+LhzaMyjpmalKwydwaH/8DCRL0T/s0Nv5bnn1qf1
ir1lAhQapUxBdDAPFFTMjPj2pJubnNSyqbzaEhQ5ZXpTX9Suan8R+zR1UwrCagMC
AwEAAaOCAoUwggKBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUEqSRH2tA/FFRHEq5
7BzGOjDOLdkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzA7BgNVHREENDAyghVncmFkdWF0ZXMuYXZpdmEuY28udWuCGXd3
dy5ncmFkdWF0ZXMuYXZpdmEuY28udWswTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAy
epGaDIShEhKEGHWWgXFFWAAAAW4CKS4xAAAEAwBHMEUCIQCl8gu45hXqcap+Bavy
cVOZ2gToRh6shWG45VpC9AuxZwIgVxGd7UwxpkGnmnyPBbPaebzeKqgjO6ZSUXCs
6R9rP98AdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW4CKS4y
AAAEAwBHMEUCIHFS4DgE1ItJ3XEOWMjXqWxjU67nNEIWVA0VzAEVPVIkAiEAgFIt
MLmuecEIemhQjHYrpkcOtwkIogawiyjr2dG/8t4wDQYJKoZIhvcNAQELBQADggEB
AETx1+YjB0fY5HDkoKIPSxpKfUZI7jWmdeI6F46w3cRw9oZNhZlYqcUcGP9MsbVP
KLg+NvvL7B+igWIGG4y0H9oYcnSyufTFQC+WpI1Irtuc5hJwxwc1iQMRaDQgZy52
BTu9v8J9xun9JrItubuyGoSpqC2HzwQHn/1uU7oRhL/wxbPYUCkYP+w+tI9lPw07
RrkIyC5S9Nu3i3FZDPiMwfaS6Egyn0vXWGcO6Pe5sFebiiDpPiAtRZ4uU4f7+0vI
MIQ51fBPlAEu+zdOhFAt7Wd0hgGJNvMFM3fmIGYTsCeM1fqckoVATfhLpaDIBeR6
FFM0aAwpKjTWa5uVJApOYyY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KgucnjKCuUjLSnFAovQ
1HxPceqY8UpVOpzludrhUwDSTIOO2AXTaOACDqEfqr+QcH0psSmb8qOrfD0aQEnS
m/XQZCTIUd6HH9RXMun053C0MSwU1OCecw+DjtYL5okIDkf/nND2bf9cnXnXOQUo
rSWI/s3bzHYNMcJhDUc0FeT+t0jKRkjb9fw2NGv+WV4B0PdH4Q9dgPFFMRYwwmIH
383BqUPabP0qsWyDPYKlmGI1hpP4uHNozKOmZqUrDJ3Bof/wMJEvRP+zQ2/luefW
p/WKvWUCFBqlTEF0MA8UVMyM+Pakm5uc1LKpvNoSFDllelNf1K5qfxH7NHVTCsJq
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289028582820825330761164276016858533742783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 08:04:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 08:04:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'graduates.aviva.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30380126548027368829348586586165554066439498401268529465211541322913028793466334550826443281187976806925609544670495996496491398616917880863780247173447535605943162689741543038628867374769315833483028507400174416106364405832439435953354788126912477627415513253390634477193262543290674104290660640983007003537650329649564295805390800721066717306415630739691141074455642992631937210849887196973251725582272198093050262654177721414092918903458313291500925046427819186232656660652376280940084916987604870691453866898946639968853982743867280416555169319426926391482905014255066285298246639529774554169617755117014566988291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12a4911f6b40fc51511c4ab9ec1cc63a30ce2dd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduates.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduates.aviva.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e02292e310000040300473045022100a5f20bb8e615ea71aa7e05abf2715399da04e8461eac8561b8e55a42f40bb167022057119ded4c31a641a79a7c8f05b3da79bcde2aa8233ba6525170ace91f6b3fdf007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e02292e32000004030047304502207152e03804d48b49dd710e58c8d7a96c6353aee7344216540d15cc01153d522402210080522d30b9ae79c1087a68508c762ba6470eb70908a206b08b28ebd9d1bff2de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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